copyrightreviews-x[.]com

Analysis of the domain copyrightreviews-x.com, created on 23 February 2026 and hosted on Google Cloud infrastructure (IP 34.42.100.71, AS396982, United States), indicates that it was employed in a social‑media phishing campaign. The domain is delegated to Google’s authoritative name servers ns‑cloud‑b1.googledomains.com, ns‑cloud‑b2.googledomains.com and ns‑cloud‑b3.googledo, and resolves to the single IPv4 address mentioned above. No TLS certificate was observed; the site served HTTP only, which reduces transport‑layer trust. The page title returned by the server reads “copyrightreviews‑x.com | Unstoppable Domains | Unstoppable Domains”, confirming registration through the Unstoppable Domains registrar.

The domain has been taken offline at the time of reporting (23 July 2026) and is listed on three independent security blocklists. It is also flagged by the phishing‑specific blocklists PhishDestroy, MetaMask and SEAL. VirusTotal analysis shows that one of ninety‑three scanning engines raised a detection, reinforcing the suspicion of malicious intent. The combination of a recent registration date, lack of HTTPS, use of a reputable cloud provider without additional hardening, and inclusion on multiple anti‑phishing blocklists strongly suggests that the domain was deliberately created to host a phishing page targeting users of social media platforms.

Because the site is no longer reachable, direct content verification is not possible; therefore the exact phishing payload, credential‑capture mechanisms, or targeted brand cannot be confirmed. Defenders should continue to block the domain and its associated IP address at network perimeter devices, update URL filtering policies, and monitor for any re‑use of the same IP range or name‑server configuration. Continuous observation of the registrar’s activity and periodic re‑scanning of the domain, should it reappear, are recommended to mitigate potential resurgence.